Question

我想使用android HTTPS连接。我有.crt格式的SSL证书，但android需要.bks格式如何在ubuntu中转换此证书格式

Answer 1

步骤： -

转换＆＃34; .crt＆＃34; to＆＃34; .cer - （Base 64）＆＃34;通过Windows操作系统或任何其他来源。
下载＆＃34; Bouncy Castle提供商＆＃34; （bcprov-jdkxx-xxx.jar）来自http://www.bouncycastle.org/latest_releases.html
使用以下cmd转换＆＃34; .cer＆＃34;生成到＆＃34; .bks＆＃34;格式： -

＆＃34; pathOfJRE / bin中/ keytool_here＆＃34; -importcert -v -trustcacerts -file＆＃34; .cerFilePath_here＆＃34; -alias myAlias -keystore＆＃34; pathToStoreGeneratedBKSfile_here＆＃34; -provider org.bouncycastle.jce.provider.BouncyCastleProvider -providerpath＆＃34; downloadedBouncyCastleProviderLocation_here＆＃34; -storetype BKS -storepass＆＃34; bksFilePassword_here＆＃34;

******例****** ＆＃34; C：\ Program Files（x86）\ Java \ jre1.8.0_91 \ bin \ keytool＆＃34; -importcert -v -trustcacerts -file＆＃34; C：\ Users \ chetan \ Desktop \ Pravin-123 / abc_prod.cer＆＃34; -alias myAlias -keystore＆＃34; C：\ Users \ chetan \ Desktop \ Pravin-123 / abc_tbu__prod.bks＆＃34; -provider org.bouncycastle.jce.provider.BouncyCastleProvider -providerpath＆＃34; C：\ Users \ chetan \ Desktop \ Pravin-123 \ bcprov-jdk15on-155.jar＆＃34; -storetype BKS -storepass＆＃34; abc！Tbu @ app123＆＃34;

验证生成的.bks文件，cmd： -

＆＃34; pathOfJRE / bin中/ keytool_here＆＃34; -list -keystore＆＃34; pathOfeGeneratedBKSfile_here＆＃34; -provider org.bouncycastle.jce.provider.BouncyCastleProvider -providerpath＆＃34;＆＃34; downloadedBouncyCastleProviderLocation_here＆＃34; -storetype BKS -storepass＆＃34; bksFilePassword_here＆＃34;

****** *****实施例＆＃34; C：\ Program Files（x86）\ Java \ jre1.8.0_91 \ bin \ keytool＆＃34; -list -keystore＆＃34; C：\ Users \ chetan \ Desktop \ Pravin-123 / abc_tbu__prod.bks＆＃34; -provider org.bouncycastle.jce.provider.BouncyCastleProvider -providerpath＆＃34; C：\ Users \ chetan \ Desktop \ Pravin-123 \ bcprov-jdk15on-155.jar＆＃34; -storetype BKS -storepass＆＃34;＆＃34; abcTbu @ app123＆＃34;

在android中使用此bks文件。将其放在原始文件夹中，并将其路径提供给Secure httpUrlConnection

-Ref： http://transoceanic.blogspot.in/2011/11/android-import-ssl-certificate-and-use.html，

https://github.com/ikust/hello-pinnedcerts

Answer 2

要生成.bks文件，您需要：

openssl
sed
keytool（JAVA附带）
Bouncy Castle Jar - Link to File

现在执行以下步骤：

获取服务器的公共自签名证书：

echo | openssl s_client -connect [SERVER_URL]:443 2>&1 | \
  sed -ne "/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p" > [Certificate_file_name].pem

使用密码生成.bks文件

keytool -importcert -v -trustcacerts -file "[Certificate_file_name].pem" \
  -alias [Alias_name] -keystore "[BKS_file_name].bks" \
  -provider org.bouncycastle.jce.provider.BouncyCastleProvider \
  -providerpath "[DOWNLOADED_JAR_FILE_PATH]" -storetype BKS -storepass [Pass_phrase]

确认文件已创建

keytool -list -keystore "[BKS_file_name].bks" \
  -provider org.bouncycastle.jce.provider.BouncyCastleProvider \
  -providerpath "[DOWNLOADED_JAR_FILE_PATH]" -storetype BKS -storepass [Pass_phrase]

Android SSL证书转换

2 个答案: